DIOPHANTINE DEFINABILITY OF INFINITE DISCRETE 
NON-ARCHIMEDEAN SETS AND DIOPHANTINE MODELS OVER 
LARGE SUBRINGS OF NUMBER FIELDS 



BJORN POONEN AND ALEXANDRA SHLAPENTOKH 

Abstract. We prove that infinite p-adically discrete sets have Diophantine definitions in 
large subrings of some number fields. First, ii K is a. totally real number field or a totally 
complex degree-2 extension of a totally real number field, then there exists a prime p of 
K and a set of /C-primes S of density arbitrarily close to 1 such that there is an infinite 
p-adically discrete set that is Diophantine over the ring Ok,s of iS-integers in K. Second, 
if if is a number field over which there exists an elliptic curve of rank 1, then there exists a 
set of if-primes S of density 1 and an infinite Diophantine subset of Ok,s that is ii-adically 
discrete for every place v of K. Third, if if is a number field over which there exists an 
elliptic curve of rank 1, then there exists a set of if -primes S of density 1 such that there 
exists a Diophantine model of Z over Ok,s- This line of research is motivated by a question 
of Mazur concerning the distribution of rational points on varieties in a non-archimedean 
topology and questions concerning extensions of Hilbert's Tenth Problem to subrings of 
number fields. 



1. Introduction 

Matijasevic (following work of Davis, Putnam, and Robinson) proved that Hilbert's Tenth 
Problem could not be solved: that is, there does not exist an algorithm, that given an 
arbitrary multivariable polynomial equation f{xi, . . . , x„) = with coefficients in Z, decides 
whether or not a solution in Z" exists. It is not known whether an analogous algorithm exists, 
however, if in the problem one replaces Z by Q in both places. One natural approach to 
proving a negative answer for Q is to show that Z admits a Diophantine definition over Q, or 
more generally that there is a Diophantine model of the ring Z over Q; the meaning of these 
statements is given in Definitions 11.11 and 11.31 below. (See IDLPVGOO] for an introduction to 
the subject.) 

Definition 1.1. Let i? be a (commutative) ring. Suppose A <0 for some G N. Then 
we say that A has a Diophantine definition over R if there exists a polynomial 

f(tl, . . . , tfc, Xl, . . . , Xji) G R\tly • • • ; ^fc; ; 2^1; • • • ; 3^n] 

such that for any (ti, . . . , 4) G -R^, 

{ti,...,tk) e A <^ 3xi, . . . ,x„ G i?, /(ti, . . . ...,x„) = 0. 
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In this case we also say that A is a Diophantine subset of i?^, or that A is Diophantine 
over R. 

Remark 1.2. Suppose that i? is a domain whose quotient field is not algebraically closed. 
Then 

(a) Relaxing Definition II. II to allow an arbitrary finite conjunction of equations in place 
of the single equation on the right hand side does not enlarge the collection of Dio- 
phantine sets. 

(b) Unions and intersections of Diophantine sets are Diophantine. 
See the introduction in |Phe94j for details. 

Definition 1.3. A Diophantine model of Z over a ring i? is a Diophantine subset A C 
i?^ for some k together with a bijection 0: Z — > A such that the graphs of addition and 
multiplication (subsets of Z^) correspond under to Diophantine subsets of A^ C R^^. 

Mazur formulated a conjecture that would imply that a Diophantine definition of Z over 
Q does not exist, and later in |CZ00j it was found that his conjecture also ruled out the 
existence of a Diophantine model of Z over Q. One form of Mazur's conjecture was that for 
a variety X over Q, the closure of X(Q) in the topological space X(M) should have at most 
finitely many connected components. See |Maz92j . |Maz94j . |Maz95j . |Maz98j . |(7rSSD97j . 



|CZ00j . |Poo03j . and |Shl03j for more about the conjecture and its consequences. 



Mazur also formulated an analogue applying to both archimedean and nonarchimedean 
completions of arbitrary number fields. Specifically, on page 257 of jMaz98j he asked: 

Question 1.4. Let V be any variety defined over a number field K. Let iS be a finite set 
of places of K, and consider Kg = Ylves viewed as locally compact topological ring. Let 
V{Ks) denote the topological space of i^^-rational points. For every point p G V{Ks) define 
W{p) G V to be the subvariety defined over K that is the intersection of Zariski closures of 
the subsets V{K) fl U, where U ranges through all open neighborhoods of p in V{Ks). As p 
ranges through the points of V{Ks), are there only a finite number of distinct subvarieties 
Wip)7 

In Question 11.41 it does not matter whether we require V to be irreducible. (We will not.) 

Proposition 1.5. Fix a number field K and a place p. // Question ]! .4\ has a positive answer 
for K and S := {p}, then there does not exist an infinite, p-adically discrete, Diophantine 
subset of K. 

Proof. Suppose there exists a subset A of K that is infinite, p-adically discrete, and Dio- 
phantine over K. The Diophantine definition of A corresponds to an affine algebraic set V 
such that the projection w : V ^ onto the first coordinate satisfies 7r{V{K)) = A. 

Suppose a G A. Since A is p-adically discrete, there exists an open neighborhood of a 
in Kp such that An N = {a}. Pick p G V{K) with tt{p) = a. Then U := 7r~-'^(A^) is an open 
neighborhood of p, and vr maps V{K) fl U into ACl N = {a}, so W{p) C 7r~^(a). 

By choosing one p above each a E A, we get infinitely many disjoint subvarieties W{p), 
contradicting the positive answer to Question 11.41 □ 



In view of the proposition above, constructing a Diophantine definition of an infinite dis- 
crete p-adic set over a number field K would be one way to answer Question II .41 fnegativelv) 
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for K. Unfortunately, at the moment such a construction seems out of reach. Thus instead 
we consider analogues in which K is replaced by some of its large integrally closed subrings. 



Definition 1.6. If is a number field, let Vk be the set of finite primes of K. For S C Vk, 

define the ring of S -integers 

Ok,s = {x eK \ ordpx > for all p ^ 5 }. 

(Elsewhere the term iS-integers often presupposes that S is finite, but we will use this term 
for infinite S also.) 

If iS = 0, then Ok,s equals the ring Ok of algebraic integers of K. li S = Vk, then 
Ok,s = K. In general, Ok,s lies somewhere between Ok and K, and the density of S (if it 
exists) may be used as a measure of the "size" of Ok,s- Throughout this paper, "density" 
means natural density, which is defined as follows. 

Definition 1.7. Let S C Vk- The density of S is defined to be the limit 

#{peS:Np< X} 
x^^oc #{all p:Np<X} 

if it exists. If the density of S does not exist, we can replace the limit in Definition 11.71 bv 
limsup or liminf and hence define the upper or lower densities of S. (See |Lan94| VIII, §4] 
for more about density.) 

The study of Diophantine definability and the archimedean conjecture of Mazur over 
rings of iS-integers has produced Diophantine definitions of Z and discrete archimedean sets 
over large subrings of some number fields (see lEEMl, (EEEQil, (EEESl, M and lEElSl). 



Recently in (Poo03j . the first author constructed an infinite discrete Diophantine set (in the 
archimedean topology) and a Diophantine model of Z over a subring of Q corresponding to 
a set of primes of density 1. Thus he showed that the analogue of Hilbert's Tenth Problem 
is undecidable over such a ring. 

In this paper we consider Diophantine definability of infinite discrete p-adic sets over some 
rings of iS-integers. Our results will come from two sources: norm equations (as in 
and elliptic curves (as in |Poo03p . Our main results are stated below. When we say that 
a subset of Ok,s is Diophantine, we mean that it is Diophantine over Ok,s- A subset S of 
Vk is recursive if there exists an algorithm that takes as input an element of K (given by 
its coordinates with respect to some fixed Q-basis) and decides whether it belongs to Ok,s- 

Theorem 1.8. Let K he a totally real number field or a totally complex degree-2 extension 
of a totally real number field. Let p be any prime of K . Then for any e > there exists 
a recursive set of K-primes S containing p of density > 1 — e such that there exists an 
infinite Diophantine subset of Ok,s that is discrete and closed when viewed as a subset of 
the completion Kp. 

Theorem 1.9. Let K be any number field for which there exists an elliptic curve E such 
that rank E{K) = 1. Then 

(1) There exist recursive subsets 7^,7^ C Vk of density such that for any S with 
Tl C 5 C Vk — T2, there exists an infinite Diophantine subset A of Ok,s such that 
for all places v of K , the set A is discrete when viewed as a subset of the completion 



(2) There exist recursive subsets 7^', 7^' C Vk of density such that for any S with 
T{ C S Vk — T-l, there exists a Diophantine model of the ring Z over Ok,s- 

2. Using Norm Equations 

In this section we use norm equations to construct infinite Diophantine p-adically discrete 
sets, in order to prove Theorem 11.81 

2.1. Preliminary results. 

Proposition 2.1. Let K be a number field and let S C Vk- The Ok,s — {0} is Diophantine 
over Ok,s- 

Proof. See Proposition 2.6 on page 113 of [ShlOObj . (Note: there is a typo in the statement 
in IShinnbj : the last K should be Ok,w-) □ 

The importance of Proposition 12 . II is that equations with variables intended to range over 
K can now be interpreted in the arithmetic of Ok,Si since elements of K can be represented 
as fractions of elements of Ok^s with nonzero denominator. 

Proposition 2.2. Let K be a number field, and let p G Vk- Then the discrete valuation 
ring Ok,Vk-{p} = {x & K : ordpX >0} is Diophantine over K. 

Proof. See Lemma 3.22 in |Shl94j . □ 

Corollary 2.3. Let K be a number field, and let p G Vk- Then the sets {x E K : ordpX > 
0}, { (x, y) G : ordpX > ordp?/}, and { {x,y) G : ordpX = ordp?/} are Diophantine 
over K . 

Proof. Fix a E K with ordp a = 1. Then 

ordpX > <^=^ ordp(a;/a) > 0, 
ordp x> ordp?/ <^==^ {3r){x = ry and ordpr > 0), 
ordpX = ordpy <^==^ (ordpX > ordpi/) and (ordpy > ordpx). 

□ 

Propositions 12.11 and 12.21 together imply the following generalization of Proposition 12.21 
(cf. Theorem 4.4 in |Shl94j l: 

Proposition 2.4. Let K be a number field. If S S' C Vk o,nd S' — S is finite, then Ok,s 
is Diophantine over Ok,s'- 

Lemma 2.5. Let F be a number field. Let {ui, . . . , ujg} be a "L-basis for Op. Let ai, . . . , G 
Q, and let x = X]i=i '^j'^*- Tet p be a prime of Q that does not ramify in F. Then 

min ordp = min ordm x, 
where ^ ranges over F -primes above p. 

Proof. Since p is unramified in F, the ideal pOp factors as the product of the Thus we 
have an equality p^Op = Hip^™ 'ti G Z. The two minimums in the statement 

equal the largest m for which x belongs to this fractional ideal, since p^ui, . . . , p^ujg form 
a Z-basis ioi p^'Op. □ 
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Lemma 2.6. For any rational primes p and q, there exists a degree-p cyclic extension E/Q 
in which q splits completely. If moreover p is odd, then any such E is totally real. 

Proof. Choose a rational prime i splitting completely in Q(e2^^/P, q^ /P). Then i = 1 (mod p) 
and the image of q in (Z/£Z)* ^ Gal(Q(e^'^*/^)/Q) is a p-th power. Equivalently, the Frobe- 
nius automorphism Frob^ E Gal(Q(e^'^*/^)/Q) belongs to the index-p subgroup H of the 
cychc group Gal(Q(e2^^/^)/Q). Let E be the subfield of Gal(Q(e2^^/0/Q) fixed by H. Then 
the image of Frobg in Gal(-E/Q) is trivial, so q sphts completely in E. Odd-degree Galois 
extensions of Q are totally real. □ 

2.2. Notation and Assumptions. We view all number fields as being subfields of a fixed 
algebraic closure Q, so that compositums are well-defined. 

• Let K be the number field given in Theorem 11.81 Thus K is totally real, or is a 
totally complex degree-2 extension of a totally real field. 

• Let n = [i^' : Q]. 

• Let p be the prime of K in Theorem 11.81 

• Let pq be the prime of Q below p. 

• Let p = Po < Pi < ■ ■ ■ < Pn he a. sequence of odd primes such that Pi > n and 
1/pi < e/{n + 1) for all i. 

• Let E = Eq, El, . . . , En, he a sequence of totally real cyclic extensions of Q such that 
[Ei : Q] = Pi and pq splits completely in E. (These exist by Lemma ITU) 

• Let L he an imaginary degree-2 extension of Q in which pq splits completely. (For 
instance, let 6 < be an integer that is a nonzero square mod pq and let L = Q{Vb).) 

• Let Vq be the set of rational primes that are inert in all of the extensions Ei/Q for 
0<i<n. Let Wq = Vq U {pq}. 

• Let Wel he the set of _EL-primes above Wq. 

• Let Wk he the set of i^-primes above Wq. 

• Let (Ji, aE he generators of Gal(L/Q), Gal(£'/Q) respectively. 

• Let Pel be a prime above pq in EL. 

• Let fl = {uji, . . . ,LJ2p} he a Z-basis for Oel- Then Q is also an OQ WQ-basis for 

OeL,Wel- 

2.3. Discrete Diophantine subsets of large subrings of Q. The following proposition 
provides the foundation for our construction. 

Proposition 2.7. Let x G Oel,Wel ^ solution to the system 

[ Nel/l{x) = 1, 

1 NEL/Eix) = 1. 

(2) X is a unit at all primes of EL above pq except possibly for 

Pel, CTEipEi), o-l{Pel), and aEO-iipEL) = o-l(Te{Pel); and 



(1) 

such that 



(3) oi'dpg^ X > and oida e(jl(Pel) x> ^■ 
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Then the divisor of x equals 



\o-e{Pel) criipEL) J 

for some k G Z>o- Furthermore, the set of solutions to (0) satisfying © and Q is nonempty 
and closed under multiplication. If Xi and x^ are solutions to (P), then Xijx^ is again a 
solution to (P), hut Xijx^ will not necessarily satisfy (0) and even if Xi and X2 do. 

Proof. Since pq splits completely in E and in L, it splits completely in EL. Now apply 
Section 3.3.2 on page 131 of |Shinnbj . □ 

Corollary 2.8. Let A be the set of [ai, . . . ,a2p) in (C^q.vVq)^^ such that the element x = 
Y^^Li^^i^i of Oel,Wel satisfies (H}, and Q- Let B he the set of b & ^q,Wq such that 
for some (ai, . . . , a2p) G A, 

(i) The element b equals one of the a^, and 

(ii) ordpQ b = min{ordpQ Oi, . . . , ordp^ 03^}. 

(Thus B is the set of "pq-adically largest coordinates" of elements of A.) For r 6 Z, let 
Br = {b E B : ordpQ b = r}. Then 

(1) A and B are Diophantine over Cq,Wq- 

(2) There exists M G Z>o such that B = |Jm=i ^-Mm md each B^Mm in the union is a 
nonempty finite set. 

Proof. 

(1) By writing each norm in (^J) as a product of conjugates, we find that the equations (0) 
are equivalent to polynomial equations in the a^. By Corollary 12 . 31 together with the 
"Going up and then down" method (see Section 2.2 of |ShlOObj ). conditions and © 
are Diophantine. Thus A is Diophantine. 

Condition (i) is Y[l=ii^~^i) ~ condition (ii) is Diophantine by Corollary 12. 31 

so B is Diophantine too. 

(2) If 6 G 5 is associated to (ai, . . . , a2p) G A and k is the positive integer in (jH) for the 
element x = ^11=1 ^^i^i^ then ordp^ b = —khj Lemma Thus the set of r for which 
Br ^ ^ equals the set of possibilities for —km (jH) as a; varies over all solutions to 

satisfying Q and 0. Let M be the smallest positive integer such that — M is 
a possible value of —k. Proposition 12.71 implies that the set of possibilities for —k is 
then {-M, -2M, . . . }. Thus fi^ ^ if and only if r G {-M, -2M, . . . }. 

It remains to prove that each Br is finite. Fix r E^L. The finiteness of Br follows 
once we show that the set of x satisfying (P), 0, and Q and having /c = — r in (jH) 
is finite. Suppose xi and X2 are two such values of x, so by (jH) the divisor of Xi/x2 is 
trivial. Then Xi/x2 G 0%i^ and Nel/e{.xi/ X2) = 1. But EL/E is a totally complex 
degree-2 extension of a totally real field, so these conditions imply that Xi/x2 is a 
root of unity. Finally, there are only finitely many roots of unity in EL. 

□ 

Corollary 2.9. There exists an infinite Diophantine subset B of 0q,Wq that is pq-adically 
discrete and closed. 
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Proof. The Diophantine set B of Corollary 12.81 is infinite, because it is an infinite disjoint 
union of nonempty sets. It is pQ-adically discrete and closed, because for each r < 0, the set 
of 6 G -B with ordpQ b > r is finite. □ 

2.4. Discrete Diophantine subsets of large subrings of K. 

Proposition 2.10. Let U be a set of K -primes remaining prime in EiK/K for i = 0, . . . ,n. 

Then there exists a set of K -primes U such that the set difference {U —U) U {U —U) is finite 
and Oj^ij n Q has a Diophantine definition over Oj^^. 

Proof. See Corollary 2.3 and Theorem 3.8 of |Shl02j . (The application of Corollary 2.3 
requires that pi does not divide the absolute degree of the Galois closure of K/ Q; this holds 
since Pi > n.) □ 

Clearly Proposition I2.1UI implies the slightly stronger version in which the hypothesis on 
U is weakened to the hypothesis that all but finitely many primes of U are inert in all the 
EiK/ K. We now show that we can also insist that the new set of primes contains the original 
set: 

Proposition 2.11. Let U be a set of K -primes such that all but finitely many of them are 
inert in EiK/K for i = 0, . . . ,n. Then there exists a set of K -primes U' containing U such 
that W — U is finite and Ok,u' H Q zs Diophantine over Ok,u'- 

Proof. Let U be the set given by (the slightly stronger version of) Proposition I2.10t and let 
W = UUU. Thus U'-U is finite. 

By choice of U, the set R := Oj^fi H Q is Diophantine over Oxjj-, which is Diophantine 
over Ok,u' by Proposition 12.41 Thus i? is a Diophantine subset of Ok,u'- The desired subset 
Ok,u' n Q can now be defined as the set of elements of Ok,u' equal to a ratio of elements of 
R with nonzero denominator (here we use Proposition 12. II for R). □ 

Proof of Theorem \l.^ We will apply Proposition 12. 1 ll to the set Wk defined in Section IT^ 
By assumption, the cyclic extension Ei/Q has prime degree Pi > n. Thus [E^K : K] = Pi, 
and moreover, a i^-prime is inert in E^K/K if and only if the Q-prime below it is inert in 
Ei/Q. All primes of Wq but pq are inert in all the Ei/Q, so all primes of Wk but finitely 
many are inert in all the EiK/K. Thus we may apply Proposition 12.111 to find a set of 
K-primes such that W'^ — VVk is finite and such that the set C'q.w^ is Diophantine over 
OK,yv'^, where Wq is the set of Q-primes q such that all /'^-primes above q lie in W^. 
Since - Wk is finite, Wq - Wq is finite. 

Now the infinite set B of Corollarv l2.9l is Diophantine over Oq^Wj^, which by Proposition l2.4l 
is Diophantine over (9q w^, which is Diophantine over Ok,Wj^- Thus B is Diophantine over 
^K.Wj^- Since p lies above pq, the set B is p-adically discrete and closed. To fulfill the 
requirements of Theorem 11.81 we take S = W'k- This is recursive, since up to a finite set, its 
primes are characterized by splitting behavior in a finite list of extension fields. 

It remains to show that Wj^ has density greater than 1—e. Up to finitely many primes, 
is defined by the splitting behavior in finitely many extensions of K (namely, the EiK/K). 
Thus, by the Chebotarev Density Theorem (see Theoreme 1 of |Ser81j for a version using 
natural density), Wj^ has a density. The density of the set of i^-primes that fail to be inert 

7 



in EiK/K is l/pi, so the density of Wj^ is at least 



71-. n 

i-Er>i-E 



l-e. 



Pi ^-^ n + 1 

□ 

3. Using Elliptic Curves 

3.1. Notation. 

• Whenever /c is a perfect field, let k be an algebraic closure, and let Gk = GaA{k/k). 

• K is a. number field. 

• E' is an elliptic curve of rank 1 over K. (In particular, we assume that K is such that 
such an E exists). 

• We fix a Weierstrass equation y"^ = + ax + b for E with coefficients in the ring of 
integers of K. 

• E{K)toTs is the torsion subgroup of E{K). 

• r is an even multiple of i^E{K)tors- 

• Q E E{K) is such that Q generates E{K) /E{K) tors- 

• P= rQ. 

• Vq = {2, 3, 5, ... } is the set of rational primes. 

• Vk is the set of all finite primes of K. 

• Let iSbad ^ consist of the primes that ramify in K/Q, the primes for which the 
reduction of the chosen Weierstrass model is singular (this includes all primes above 
2), and the primes at which the coordinates of P are not integral. We occasionally 
view E as the scheme over 0x,<Si,ad defined by the homogenization of the Weierstrass 
equation. 

• E' is the smooth afiine curve y'^ = x^ + ax + b over OK,Si,^i- Thus E' is E with the 
zero section removed. 

• A4k is the set of all normalized absolute values of K. 

• -Mk^oo C J^k is the set of all archimedean absolute values of K. 

• For p e Vk, let 

(1) Kp be the completion of J^" at p. 

(2) Rp be the valuation ring of 

(3) Fp be the residue field of Rp, 

(4) Np = #Fp be the absolute norm of p 

• Write nP = (a;„, where Xn, yn e K. 

• Let the divisor of x„ be of the form 

On, 
— &n, 

where 

— dn = Ylq fl '^'' 5 where the product is taken over all primes q of K not in 5bad such 
that = ordqX^ < 0, 

~ Oin = Ylq l"" ' where the product is taken over all primes q of i^T not in 5bad such 
that Oq = ordqXn > 0. 

— bn = Ylq l"'' ' where the product is taken over all primes q G iSbad and Cq = 

Ordq Xn- 
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• For n as above, let iS„ = {p G Vk '■ p|fn}- By definition of iSbad, we have Si = 0. 

• For n as above, let dn = N0„ G Z>i. 

• For u G K* and v a place of K lying above the place p of Q (possibly p = oo), define 
the (unnormalized) local height hy(u) = logmaxjll-uH^, 1} where = \Nk^/Qp{u)\p 
and Ky and Qp denote completions. 

• For u G K*, define the global height h{u) = X]t;eAiK hy{u). 

• For £ G "Pq, define to be the smallest positive number such that Sre 7^ 0- (By 
Siegel's Theorem, = 1 for all but finitely many i.) 

• Let £ = G : > 1} and L = H^e/: 

• Let be a prime of largest norm in Spi. 

• For i,m E Vq, let p^^ be a prime of largest norm in Sim. — {Si U Sm), if this set is 
nonempty (see Proposition I3.5|) . 

• E[m] denotes { T G ^(F) : mT = }. 

• If A is an ideal in the endomorphism ring of E, then 

^[A] := { T G E(K) ■.aQ = for some a G A }. 

3.2. Divisibility of denominators of x-coordinates. The next lemma is the number 
field analogue to Lemma 3.1(a) of |Poo03j . where it was proved for Q. 

Lemma 3.1. Let P G E{K) — {0} be of infinite order and let n E 'L — {0}. Let x he an 
integral divisor of K. Then {n G Z : r | D.„(P)} is a subgroup ofZ. 

Proof. It is enough to prove the lemma when r is a prime power p™. Let E be the formal 
group over Rp defined by the chosen Weierstrass model of E. Let E{pRp) be the group of 
points associated to E. There exist Laurent series x{z) = + ■ ■ ■ and y{z) = + ■ ■ ■ 
with coefficients in Rp giving an injective homomorphism E{pRp) — > E{Kp) whose image 
is the set Ei{Kp) of {x,y) G E{Kp) with ordp(x) < (together with O): this follows 
from Proposition VII. 2. 2 of |Sil92j when the Weierstrass equation is minimal, but the proof 
there does not use the minimality. Since ordp x{z) = —2 ordp z whenever z G p-Rp, the set of 
{x, y) G E[Kp) with ordp(x) < — m (together with O) corresponds under this homomorphism 
to a subgroup p^'^/^^-Rp of p-Rp, and hence is a subgroup of E{Kp). □ 

Corollary 3.2. Let m,n E — {0}, and let (m, n) be their god. Then Sm H 5.„ = iS(m,^„). In 
particular, if (m, n) = 1 then Sm D iS^ = 0- 

3.3. New primes in denominators of x-coordinates. 

Lemma 3.3. Let n G Z>i. Suppose that t G Vk divides Dn, o,nd p > 3 is a rational prime. 

(1) If t\ p, then ordtOpn = ordtC)„ + 2. 

(2) Ift\p, then oididpn = oididn- 

Proof. We will use the notation of Lemma 13.11 Since t | On, by assumption t ^ iSbad- In 
particular t is not ramified over Q. Furthermore, ordtx^ < 0, so nP G Ei{Ki). Let z 
be the corresponding element in the group of points E{tRi) of the formal group. We have 
[p]z = pf{z) + g{zP), by Proposition 2.3, page 116 and Corollary 4.4, page 120 of |Sil92j . 
where [p] is the multiplication-by-p in the formal group and f{T),g(T) G -Rt[[^]] satisfy 
g{0) = and /(T) = T + higher order terms. Thus ordt([p]2;) equals (ordt-z) + 1 or ordt^;, 
depending on whether t | p. Since x = z~^ + ■ ■ ■ , we find that ordtXp„ equals (ordtX„) — 2 
or ordtX„, depending on whether t\ p. □ 
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Lemma 3.4. There exists c G M>o such that \ogdn = (c — o(l))n^ as n — > oo. 

Proof. Let h be the canonical height on E{K). Then h{nP)/n'^ is a positive constant inde- 
pendent of n. The Weil height differs from h by 0(1), so h{xn)/n^ tends to a positive limit 
as n — * oo. By definition, h{xn) differs from \ogdn by the sum of h^{xn) over archimedean 
V and V G iSbad- By the theorem on page 101 of |Ser97j . hy{xn)/h{xn) ^ as n — > oo for 
each V, so (log(i„)//i(x„) tends to 1 as n — >• oo. Thus (\ogdn)/n'^ tends to a positive limit as 
n — > oo. □ 

The next proposition is a number field version of Lemma 3.4 of |Poo03j . 

Proposition 3.5. If£,m G Vq andmax{i,m) is sufficiently large, then Sgrn. — {<Sel-iSm) 7^ 0- 

Proof. Suppose Sim — {^i U Sm) = 0- We claim that dim \ ^'^rn'^'Oelim- To check this, we 
compare orders of both sides at a prime t dividing Zigrn- By assumption, t divides either dg or 
dm- Without loss of generality, assume t | de. Then Lemma implies ordt < ordt(m^O£), 
which proves the claim. 

Taking norms, we obtain dim \ {£rnY^^'''^^didm- Taking logs and applying Lemma 13.41 we 
deduce 

(c - o(l))£W < 2[K : Q](log£ + logm) + (c - o{l)) f + (c - o{l))m^ 
< (c + o(l))(£2 + m2), 

which is a contradiction once i and m are both sufficiently large. □ 
3.4. Density of prime multiples. 

Lemma 3.6. Let a G M", let I be an open neighborhood of in ]R"/Z", and let d G Z>i. 
Then the set of primes i = 1 (mod d) such that {i — l)a mod 1 is in I has positive upper 
density. 

Proof. Let a = (ai, . . . , We first reduce to the case that 1, ai, . . . , a„ are Z- independent. 
Choose m G Z>i and Pi, . . . , Pr such that 1/m, . . . , /^^ form a Z-basis for the subgroup 
of M generated by 1, ai, . . . , Replacing dhj a. positive integer multiple only reduces the 
density, so we may assume m | d. For fixed i, if = ^ + Y7j=i ^jPji then for £ = 1 (mod d) 
we have 

r 

{i - l)a, = J2 - (mod 1), 

i=i 

so it suffices to prove positivity of the upper density of £ = 1 (mod d) for which {£ — l)Pj is 
sufficiently close mod 1 to for all j. 

In fact, we will prove the stronger result that the points {£ — 1)P G (M/Z)'' for prime i = 1 
(mod d) are equidistributed. By Weyl's equidistribution criterion |Weyl6t Satz 3], we reduce 
to proving that for any a G M — Q, 

e^-*^" = o(7r(x)) 

1=1 (mod d) 

as x — >■ 00. This is a consequence of Vinogradov's work on exponential sums over primes: 
see |Mon94| p. 34], for instance. □ 
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3.5. Denominators of x-coordinates having many small prime factors. We next 
prove an analogue of Lemma 7.1 of |Poo03j showing that it is rare tliat Se has a large 



fraction of the small primes. For prime i, define 

#{p eSe:Np<X} 
^'~xeL #{pGP^:Np<X}- 

Lemma 3.7. For any e > 0, the density of { i : > s } is . 

Proof. The proof can be copied from that of Lemma 7.1 of |Poo03j . using "the primes p G Vk 
with Np < X" everywhere in place of the "the primes p up to X" : it requires only the facts 

(1) The function 71k{X) := # {p € P k : Np < X} is (1 + o(l))X/logX as X oo 
(Theorem 3 on page 213 of |CF86p . 

(2) ^Se < log2 de (clear, since each prime has norm at least 2) 

(3) log2 di = 0{l'^) as £ — s> oo (follows from Lemma f3.4|) . 

□ 

3.6. Construction of the f^. By ^iMl Corollary VI.5.1.1] and [?^il94l Corollary V.2.3.1], 
there is an isomorphism of real Lie groups HijeXj^ E{Kv) ^ (M/Z)^ x (Z/2Z)^ for 
some N > 1 and N' > 0. Fix such an isomorphism, and embed E{K) diagonally in 
E{Ky). Since P = rQ with r even, the point P maps to an element a G (M/Z)^. 
Define a sequence of primes ii inductively as follows. Given let ii be the 

smallest prime outside C and exceeding the bound implicit in Proposition 13.51 such that all 
of the following hold: 

(1) ii> ij for all j < z, 

(2) fii^ < 2-\ 

(3) Np,,f^. > 2' for all j < z, 

(4) Np«^ > 2' for all £ G £, 

(5) ii = 1 (mod i\), and 

(6) \xe^^i\y > i for all v G Mk,oc- 

Proposition 3.8. The sequence ii,i2, . . . is well-defined and computable. 

Proof. Condition (6) is equivalent to the requirement that [i — l)d lie in a certain open 
neighborhood of in (M/Z)^, since the Lie group isomorphism maps neighborhoods of O to 
neighborhoods of 0. Thus by Lemma ITBl the set of primes satisfying (5) and (6) has positive 
upper density. By Lemma 13.71 (2) fails for a set of density 0. Therefore it will suffice to 
show that (1), (3), and (4) are satisfied by all sufficiently large £i. 

For fixed j < i, the primes pe-e- for varying values of ii are distinct by Corollarv 13.21 so 
eventually their norms are greater than 2*. The same holds for p«- for fixed £ G £. Thus 
by taking ii sufficiently large, we can make all the pe-ij and p«. have norm greater than 2*. 
Thus the sequence is well-defined. 

Each ii can be computed by searching primes in increasing order until one is found sat- 
isfying the conditions: condition (6) can be tested effectively, since is an algebraic 
real number. □ 

As in Section 4 of |Poo03j . we define the following subsets of Vk- 
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• is the set of pi for E ^ {£i, £2, • • • }, 

• = { pi^. : i E C,i > 1}, and 

• Ts = u r2'' u 

As in Section 5 of |Poo03j . we prove that 

Lemma 3.9. The sets Ti and T2 are disjoint. If the subset S C Vk contains T\ and is 
disjoint from T2, then £ := E'{Ok,s) H rE{K) is the union of { ±£jP : « > 1 } and some 
subset of the finite set {^sP : s \ life/: ^"^^"^ } . 

Proof. Once we note that rE{K) = ZP, the proofs proceed as in Section 5 of |Poon3j . □ 

The recursiveness of Ti and 7^ follows as in Section 8 of jPoo03], usine; the following: 
Lemma 3.10. If £ is prime, then i \ ^E{¥pJ. 

Proof. For p ^ iSbad, a multiple nP reduces to in E{¥p) if and only if p divides c)„. Hence, 
by definition of p^, the point i"-'P reduces to in E{¥pJ but i'^'-'^P does not. □ 



3.7. Density of Ti and 7^. The proofs that 7^, T2, and T2 have density are identical 
to the proofs in Section 9 of |Poo03j . The remainder of this section is devoted to proving 
that T2 has density 0. Again, we follow jPoon3j . but more work is necessary because we no 
longer assume that E has no CM. 

For n G Z>o, let uj{n) be the number of distinct prime factors of n. 

Lemma 3.11. For any t >1, the density of {p : uj{^E{¥p)) <t} is 0. 

Proof. If E does not have CM (i.e., EndE';^ = Z), then the proof given for = Q in 
Lemma 9.3 of |Poo03j generalizes easily to arbitrary K. The first step in this proof, which 



we will also use for the CM case, is to relate divisibility to Galois representations: namely, 
for a prime p of good reduction not above i, the condition i \ ^E{¥p) is equivalent to the 
existence of an ^-torsion point in E{¥p) fixed by the Frobenius element of Gal(Fp/Fp), which 
in turn is equivalent to the condition that the the image of a Frobenius element at p under 
Gk Aut E[i] = GL2(Z/£Z) has a nontrivial fixed vector in (Z/fZ)^. 

We assume from now on that E has CM, say by an order (9 in a quadratic imaginary field 
F. Using the action of O on Lie E (the tangent space of £" at O), we may view O (and hence 
also F) as a subring of K. 

All the endomorphisms are defined over the compositum KF fSiIM 11.2.2(b)]. 

Let A be the set of primes £ of Z such that i\ disc(O) and {£) factors into distinct prime 
ideals A and A of O. (Later we will delete finitely many primes from A.) 

For ieA, 

E[i] = E[X] ® E[X]. 

The summands on the right are free modules over O/X and O/X, respectively, and we 
choose generators for each in order to obtain identifications 

E[i] ~ O/X © O/X ~ (Z/ffl)^ 

and hence Aut-E'[^] ~ GL2(Z/ffl). The action of Gkf commutes with the O-action, so the 



image of Gkf in GL2(Z/£Z) lies in the subgroup ^ ' diagonal matrices. On the other 
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hand, if r G Gk — Gkf, then r interchanges A and A, and its image in GL2(Z/£Z) hes in 
* 

the coset 



* 

Define subgroups 



D 



H=r u 



of GL2 (n^g^ . Thus the image of p: ^ GL2 (n^g^Z/£Z) hes in H. It is a classical 

fact that p{Gkf) is open in D (see for example, the CoroUaire on page 302 of |Ser72j ). so 
p{Gk) is open in H. By deleting a few primes from A, we may assume that p{Gk) contains 
D, and hence equals D or H, depending on whether F <Z K or not. 

Let Hi be the probability that a random element of the subgroup ^* ^ C GL2(Z/i'Z) has 

a nontrivial fixed vector. A calculation shows that Tii = 2/i + 0(l/£^). Since A has density 
1/2, the series ^^gA-^/^ diverges. Thus Xl^gA^^ diverges. Elementary probability shows 
that if Xi,X2, ■ ■ ■ are independent events, and the sum of their probabilities diverges, then 
as G ^ 00, the probability that fewer than t of the first G events occur tends to 0. Therefore 
as C ^ 00, if cr is chosen uniformly at random from the image of D in n£gA^<c GL2(Z/£Z), 
then the probability that a has fewer than t components with a nontrivial fixed vector tends 
to 0. 

Similarly, a random element of the coset *^ C GL2(Z/£Z) has a nontrivial fixed 

vector with probability l/£ + 0(l/£^). Thus the probability that a random a from the image 
of if — D in n^eA e<c GL2(Z/£Z) has fewer than t components with a nontrivial fixed vector 
tends to 0. 

Combining the previous two paragraphs shows that the same holds for a random element of 
the image Ic of Gk — ^ n£6A^<c GL2(Z/^Z). But the Chebotarev Density Theorem implies 
that the images of the Frobenius elements Frobp in Ic are equidistributed in Ic- Finally 
we apply the "key first step" mentioned at the beginning of this proof to get the desired 
result. □ 

Using the preceding lemma, the proof that 7^° has follows exactly the proof of Proposi- 
tion 9.4 in |Poo03j . using Np in place of p in the inequalities. 
Thus 7i and T2 have density 0. 

3.8. Convergence and discreteness. 

Lemma 3.12. For each v G Aix, the sequence iiP, I2P , ■ ■ ■ converges in E{Ky) to P. 

Proof. It suffices to show that {ii — 1)P — O in E{Ky) as i — 00. If v is archimedean, 
this holds by condition (6) in the construction of the £{. Now suppose v is nonarchimedean. 
Then the topological group E{K^) has a basis consisting of open finite-index subgroups U, 
namely the groups in the filtration appearing in the proof of |Sil92| VII. 6. 3]. So it suffices to 



show, given U, that {ii — 1)P G U for sufficiently large i. Let j be the index of U in E{Ky) 
If i > j, then j \ i\ \ ii — 1, by condition (5) in the construction of the so (£j — 1)P G U. 

□ 
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Proposition 3.13. Let S be as in Lemma \3.!A Let A := {xe-^, xe^, . . .} . Then A is a 
Diophantine subset of Ok s- For any v G Aix, the set A is discrete when viewed as a subset 
ofK,. 

Proof. By Lemma l3^ x{£) is the union of the set A := {xej^,X£^, . . .} and a finite set. Since 
S is Diophantine over OK,Sy so is A. 

By Lemma [3.121 the elements of A form a convergent sequence in K^, and the limit Xi of 
the sequence is not in A, so A is discrete. □ 

This completes the proof of part (1) of Theorem 11.91 

3.9. A Diophantine model of Z. We next show how to find a Diophantine model of the 
ring Z over certain rings Ok,s- 

Lemma 3.14. Let i? = { 2" + : G Z>i }. Multiplication admits a positive existential 
definition in the structure Z := (Z>i, 1, +, B\ (Here B is considered as a unary predicate.) 

Proof. We can define > by 

X > y <^=^ (3^;) X = y + z 

and for fixed a G Z, we have 

X ^ a <^=^ (x > a) V (a > x), 

so this predicate is positive existential in Z. For fixed c G Z>i, the function x ^ ex is 
positive existential, since it can be obtained by repeated addition. 

Call X, y consecutive if there exists n G Z>i such that x = 2^ + n'^ and y = 2^^^^ + (n + 1)^. 
The set of such (x, y) is positive existential in Z since it differs from 

{ {x, y) ^ : X < y < 3x } 

in a finite set. Next 

{ {(2y — z) — {2x — y),2x — y) : x,y are consecutive and y, z are consecutive } 

equals the set T := { {2n — 1, — 2n — 1) : n G Z>i }. We have 

(n = A (i; > 0) (2v - 1 ,u — 2v — 1) E T. 

Call this relation P{u,v). Then 

u = v^ P{u,v)\/ P{u,-v)\/ {{u = 0) A{v = 0)), 

u = vw <^==^ {v + wY = f ^ + + 2u, 

so we can construct a positive existential definition of multiplication. □ 

Remark 3.15. Y. Matijasevic (private communication) independently discovered a recursive 
set B such that multiplication admits a positive existential definition in (Z>i, 1, +, B). 

Corollary 3.16. The structure (Z, 0, 1, +, ■) admits a positive existential model in the struc- 
ture Z. 
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Because of Corollary 13. 161 instead of finding a Diophantine model of the ring Z over Ok,s, 
it will suffice to find a Diophantine model of Z. 

Now we redo the construction in Section 13.61 but change some of the conditions defining 
the sequence of primes £j. Fix p, q G Vk — i^bad of degree 1 such that neither p nor q 
divides yi = y{P), and such that the underlying primes g G Vq are distinct and odd. Let 
M = pq^E (¥ p)^E (¥ . Keep conditions (1) through (4), but replace conditions (5) and (6) 
by the following: 

(5') ii = 1 (mod M), 

(6') the highest power of p dividing [ii — 1)/M is p\ and 
(7') q divides {ii - 1)/M if and only if z G 5. 

Proposition 3.17. The sequence ^1,^2, ■ ■ ■ is well-defined and computable. 

Proof. The proof is the same as that of Proposition 13 . 81 except that instead of Lemma ITH we 
will use just Dirichlet's theorem on primes in arithmetic progressions to show that conditions 
(5') through (7') are satisfied by a positive density of primes i^. 

The conditions amount to congruences modulo p'^'^^qM, so it suffices to show that one of 
the congruence classes is of the form a (mod p^^^qM) with {a,p^~^^qM) = 1. Define 

_jl+p'qM ifieB 
^ ~ + {p'q + p'+^)M ifi^B. 

Then a is congruent to 1 modulo p, modulo q, and modulo M, so {a,p^~^^qM) = 1. Any 
prime in the residue class a (mod p^'^^gM) satisfies (5') through (7'). □ 

Lemma 3.18. If m E Z>i, then 

ordp(xmM+i - xi) = ordp(xA./+i - Xi) + ordpm. 

Proof. Let R be the valuation ring Rp defined in Section 13.11 Because yi G R* and p f 2, 
for any r > 1, the restriction of the x-coordinate map E{R/p^) — > F^{R/p^) to the subset 
of points of E{R/p^) with the same image in E{R/p) as P is injective (the y-coordinate can 
be recovered from the the x-coordinate as the square root of an element of R*: its sign is 
determined by the fact that the point is in the residue class of P). Thus for r > 1, the ideal 
p^ divides XmM+i — xi if and only if (mM + 1)P and P have the same image in E{R/p^), 
or equivalently if {mM)P maps to O in E{R/p^). Let z G E{pR) be the point of the formal 
group corresponding to MP. Then the condition that {mM)P maps to O in E{R/p^) is 
equivalent to [?Ti](2;) G p'', where [m] denotes the multiplication-by-m map in the formal 
group. 

It remains to prove that ordp[m](z) = ordp 2; + ordpm. By induction on m, it suffices to 
prove this when m is prime. Then, in the proof of Lemma 13.31 we have [^](2) = ^^1/(2;) + 
g{z"^) where f{T),g{T) G -R[[T]] satisfy (7(0) = and f(T) = T+higher order terms. Finally 
ordpm = ordpm is 1 or according to whether m = p ot not, so the result follows. □ 

Proposition 3.19. Let S be as in Lemma \3.9l Let A := {x^j, x^j, • • • }■ Then A is a 
Diophantine model of Z over Ok,s, via the bisection 0: Z>i A taking i to xe.. 



Proof. The set A is Diophantine over Ok,s by the argument in the proof of Proposition 13. 131 
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We have 



i G B q divides {ii - 1)/M (by condition (7')) 

ordq(xf. - xi) > ordq(xM+i - Xi), 

by Lemma [3.181 (with q in place of p). The latter inequality is a Diophantine condition on 
Xii, by Corollarv 12.31 (in which we represent elements of K as ratios of elements of Ok^s). 
Thus the subset 4>{B) of A is Diophantine over Ok,s- 

Finally, for i G Zi>i, Lemma 13.181 and condition (6') imply ordp(a;£. — Xi) = c + i, where 
the integer c = ordp(xA/+i — Xi) is independent of i. Therefore, for k G Z>i, we have 

i + j = k ordp(x£. - Xi) + ordp(x^^ - Xi) = ordp(x4 - Xi) + c. 

It follows that the graph of + corresponds under </> to a subset of that is Diophantine 
over Ok,s- 

Thus y4 is a Diophantine model of Z over Ok^s- D 

As already remarked, Corollary 13.161 and Proposition 13.191 together imply part (2) of 
Theorem 11.91 
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